Privacy Policy

We take the protection of your personal data seriously and treat it confidentially in accordance with the General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and the Spanish data protection act (Ley Orgánica 3/2018, LOPDGDD). The controller is established in Spain; the supervisory authority is the Spanish Data Protection Agency (AEPD).

1. Controller

2. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and to withdraw consent given (Art. 7(3) GDPR). An informal message to the contact details above is sufficient.

3. Right to lodge a complaint

The competent supervisory authority is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. You may also contact the authority of your place of residence.

4. Hosting and transfer to a third country (USA)

This website is operated with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (an EU-based processor; data processing agreement under Art. 28 GDPR). Server location: a data centre in Ashburn, Virginia, USA → processing in a third country. The transfer is safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR) and technical measures (TLS). The USA does not offer a fully equivalent level of data protection; access by US authorities cannot be entirely ruled out. Legal basis: Art. 6(1)(f) in conjunction with Art. 46(2)(c) GDPR.

5. Server log files

On each access the following are automatically collected: shortened IP address, date/time, requested resource, HTTP status, data volume, referrer, browser/operating system. Purpose: technical provision and security (Art. 6(1)(f) GDPR). Deleted after 14 days at the latest.

6. SSL/TLS encryption

The website uses SSL/TLS encryption throughout (“https://”).

7. Contact form and getting in touch

If you contact us via the contact form, by email, phone or WhatsApp, we process your name, your contact details (email address or phone number), the area of interest (optional) and your message in order to answer your enquiry (Art. 6(1)(b) GDPR). A honeypot field and rate limiting protect the form against spam. With your enquiry we also store the source (e.g. a search engine or a referring website) and the page through which you entered our website (see section 12).

Enquiries are stored encrypted (AES-256-GCM) in our database and recorded as a prospective client in the administration of our coaching app so that no enquiry gets lost. Enquiries by email, phone or WhatsApp are handled in the same way; we enter WhatsApp enquiries manually. Without further consent, we delete your details no later than 6 months after your enquiry has been completed, unless a coaching contract is concluded.

Consent to being contacted again (optional): In the contact form you can voluntarily tick a box allowing us to contact you again after your enquiry has been completed (by email, phone or WhatsApp), e.g. when a coaching slot becomes available. The legal basis is your consent (Art. 6(1)(a) GDPR; for advertising by email or phone in conjunction with § 7 UWG (German Unfair Competition Act) or Art. 21 LSSI (Spanish Information Society Services Act)). We log the time and wording of your consent. You can withdraw it at any time, informally and with effect for the future; an email to the address above is sufficient. With your consent, we store your details until you withdraw it, but no longer than 24 months after the last contact.

Notification via Telegram: So that enquiries are handled promptly, we additionally send a notification to the site operator via the messenger service Telegram (Telegram FZ-LLC, Dubai, UAE); your name, email address, the area of interest you selected, your message, this origin information and – if provided – your voluntary answer to “How did you find me?” are transmitted to Telegram in the process (Art. 6(1)(f) GDPR). The UAE is a third country without an adequacy decision by the EU Commission, so a level of data protection equivalent to EU law cannot be guaranteed. No appropriate safeguards pursuant to Art. 46 GDPR are in place. The transfer is based on Art. 49(1), first subparagraph, point (b) GDPR, as it is necessary for the implementation of pre-contractual measures taken at your request (processing your contact enquiry).

8. Fonts (self-hosted)

Fonts are served locally from our server. There is no connection to Google Fonts; your IP is not transmitted to third parties for this purpose.

9. Cookies

Without your consent, this website sets no cookies for analytics or marketing and integrates no tracking services. Only if you agree in the consent banner is the analytics service PostHog loaded (see section 13). For our own cookieless audience measurement, see section 12. Only when logging in to the administration area of this website (operator only) is a technically necessary session cookie set to maintain the session (Art. 6(1)(b) or (f) GDPR); it contains no tracking function and is deleted on logout or when the session expires. The Alizee app at /app/ is covered by its own privacy notice (see section 10).

10. Members area

The members area for coaching participants is the Alizee app at /app/. The processing of your data there is governed by the app's privacy notice.

11. Newsletter and promotional emails

If you explicitly consent via a form (e.g. the AVGS check), we store your email address (encrypted, AES-256-GCM) in order to send you news, tips and offers by email. Consent is optional and independent of other functions (such as sending a letter). We use a double opt-in procedure: you first receive a confirmation email, and we only send newsletters after you confirm. Your consent is documented with timestamp and wording. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 7 UWG). You can withdraw your consent at any time with future effect — via the unsubscribe link in every email or by message to the contact details above; we then remove your address from the distribution list.

12. Audience measurement without cookies

To understand how visitors find our website, we analyse requests to our public pages on our own server. In addition, a small script on this website reports only the name of the action to our server when you click a contact option (email, WhatsApp, phone), download an information sheet or complete the AVGS check; it stores nothing on your device and transmits no inputs. No cookies are set and no third-party providers are involved; we only use information that your browser transmits anyway when loading a page. We process the page requested, the origin of the request (domain of the referring website, e.g. a search engine, or a campaign parameter such as “utm_source”) and an identifier calculated from your IP address, your browser identification and a random value generated anew every day, in order to link several requests belonging to the same visit. This identifier is kept exclusively in memory, never stored, and discarded at the latest at the next change of day; your IP address and browser identification are not stored for this purpose. Only aggregated daily figures without any personal reference are stored permanently (e.g. “3 visits to the home page via a search engine”). If you send us a contact enquiry, we additionally store the origin and the entry page of your visit with your enquiry (see section 7). The legal basis is our legitimate interest in making our services findable and tailored to demand (Art. 6(1)(f) GDPR). You may object to this processing (Art. 21 GDPR): if your browser sends the “Global Privacy Control” or “Do Not Track” signal, no measurement takes place. You can also ask us informally at any time to delete the origin information stored with your enquiry.

13. Web analytics with PostHog (consent only)

If you agree in the consent banner, we use PostHog, a service of PostHog Inc., 2261 Market Street, San Francisco, CA 94114, USA. The data is processed on servers in the EU (Frankfurt am Main). We record page views, clicks, scrolling, the referring page, device and browser, as well as session recordings from which heatmaps and click paths are derived. Form inputs are masked before transmission and IP addresses are anonymised. For this, PostHog stores a random identifier in your browser's local storage or in a cookie. The purpose is to make the website clearer and easier to use. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG and Art. 22(2) LSSI). We have a data processing agreement with PostHog (Art. 28 GDPR). Access from the USA cannot be ruled out; EU Standard Contractual Clauses apply (Art. 46(2)(c) GDPR). Session recordings are deleted after 30 days at the latest, other usage data after 12 months at the latest. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page. If “Do Not Track” or “Global Privacy Control” is enabled in your browser, PostHog is not loaded.

14. Status

As of 13 October 2026. We update this policy as needed.